Skip to content

ci: Restrict Renovate updates to the allowlisted self-hosted runner - #188

Merged
lurtz merged 2 commits into
mainfrom
copilot/renovate-artifact-update-problem
Oct 30, 2026
Merged

lurtz merged 2 commits into
mainfrom
copilot/renovate-artifact-update-problem

Conversation

Copilot AI commented Oct 30, 2026 •

Copy link
Copy Markdown
Contributor

A competing organization Renovate runner lacks permission to execute the post-upgrade scripts, leaving lockfile digests and generated documentation stale. The self-hosted runner already loads the required allowlist.

  • Runner isolation: Set enabled: false in repository configuration; enable the self-hosted job with RENOVATE_FORCE: '{"enabled": true}'.
  • Configuration separation: Remove the configurationFile input so Renovate discovers repository settings normally rather than loading them as global configuration.
  • Artifact updates: Preserve both post-upgrade scripts and their exact-command allowlist.

Copilot AI linked an issue Oct 30, 2026 that may be closed by this pull request
Co-authored-by: lurtz <727209+lurtz@users.noreply.github.com>
Copilot AI changed the title [WIP] Fix Renovate artifact update problem Restrict Renovate updates to the allowlisted self-hosted runner Oct 30, 2026
Copilot AI requested a review from lurtz October 30, 2026 08:44
@lurtz lurtz changed the title Restrict Renovate updates to the allowlisted self-hosted runner ci: Restrict Renovate updates to the allowlisted self-hosted runner Oct 30, 2026
@lurtz
lurtz marked this pull request as ready for review October 30, 2026 10:08
@lurtz
lurtz requested a review from opajonk as a code owner October 30, 2026 10:08
@lurtz
lurtz enabled auto-merge October 30, 2026 10:08
@lurtz
lurtz added this pull request to the merge queue Oct 30, 2026
Merged via the queue into main with commit f225cd3 Oct 30, 2026
15 of 19 checks passed
@lurtz
lurtz deleted the copilot/renovate-artifact-update-problem branch October 30, 2026 10:45
@github-actions

github-actions Bot commented Nov 2, 2026

Copy link
Copy Markdown

🎉 This PR is included in version 1.11.4 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Renovate Artifact update problem

3 participants